Delete Your Envokey Account or Data

For users of the Envokey app, published by Envokey, Inc.

This page explains how users of Envokey (the mobile app, web app, and browser extension published by Envokey, Inc.) can request that their account is deleted, or that some or all of their data is deleted without deleting their account.

Related: Privacy Policy.

1. Delete your Envokey account

Follow these steps to request that your Envokey account and associated data are deleted.

  1. Email us from your Envokey account address

    Send a message to privacy@envokey.com from the email address on your Envokey account.

  2. Use a clear subject line

    Use the subject line: “Envokey account deletion request”.

  3. Tell us who you are and what you want deleted

    Include your full name, the email on the account, and a statement that you want your Envokey account and associated personal data deleted.

  4. We verify and process the request

    We confirm the request with you, then disable the account so you can no longer sign in. Remaining personal data is permanently purged after the retention period below.

If you belong to an organization, an Envokey admin can also remove your account from Users in the Envokey web app. If you are the organization's primary admin and want the entire organization deleted, say so in your email, or use Settings → Danger Zone in the web app.

What is deleted

  • Account access and sign-in credentials (disabled immediately; the identity record is then purged)
  • Profile information (email, display name, profile photo, department)
  • Personal items you stored (logins, 2FA seeds, notes, cards, keys, documents, and related encrypted attachments)
  • Personal mailbox addresses and mail stored for those addresses
  • Sessions, device identifiers, and mobile push-notification tokens
  • Notification preferences and in-app tutorial progress

What is kept

  • Items and mail in shared collections owned by your organization — those belong to the organization, not to your personal account
  • Organization audit logs, which may retain your identifier until that organization's audit-retention period ends
  • Billing and tax records, for as long as we are required to keep them by law
  • Encrypted backups, for a limited operational period, then deleted

Retention period

After we process an account deletion, the account is disabled immediately. Associated personal data is retained in a deleted state for 120 days, then permanently purged. Soft-deleted personal items are permanently purged after 30 days. We may complete the request sooner on request.

2. Delete Envokey data without deleting your account

You can request that some or all of your Envokey data is deleted while keeping your account. Follow these steps.

  1. Delete what you can in the Envokey app

    In the Envokey mobile app or web app, delete the items, attachments, or personal mail you no longer want stored. Deleted items become inaccessible immediately.

  2. Email us for anything you cannot delete yourself

    Send a message to privacy@envokey.com from the email address on your Envokey account.

  3. Use a clear subject line

    Use the subject line: “Envokey data deletion request”.

  4. Specify what should be deleted

    Include your full name, account email, and the data you want deleted (for example: all personal items, a specific mailbox, sessions on old devices, or your profile photo). Say that you want to keep your account.

What is deleted

  • The personal data you asked us to delete, once we verify the request
  • Items you delete in the app: inaccessible immediately, then permanently purged after 30 days

What is kept

  • Your Envokey account, so you can keep signing in
  • Any personal data you did not ask us to delete
  • Shared collection items and mail owned by your organization
  • Organization audit logs, until that organization's audit-retention period ends
  • Billing and tax records we are required to keep by law

Retention period

Data you delete in the app, or that we delete for you, is removed from active use immediately. Soft-deleted items are permanently purged after 30 days. Account records are not removed unless you also request account deletion (Section 1).

3. Contact

Envokey, Inc.
privacy@envokey.com